Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: FhH3bABD0Opzec/5CCqYHK3gCl6geH/lUImLdVudUyA=
Subject key identifier: 09:83:BB:E8:DB:8C:E4:B8:C1:5A:87:BC:D0:97:BC:27:B1:6D:FC:21
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019A35346AEB0C371E6ACAEFED28C11AF7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 13ED
Signing time: Thu 30 Oct 2025 13:00:18 +0000
Manifest this update: Thu 30 Oct 2025 13:00:18 +0000
Manifest next update: Fri 31 Oct 2025 13:00:18 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: 8/+xVNXoMwysebIRxiV+10FqS2AmKRjTmztJQVYajAw=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:34:6a:eb:0c:37:1e:6a:ca:ef:ed:28:c1:1a:f7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Oct 30 13:00:18 2025 GMT
Not After : Oct 31 13:00:18 2025 GMT
Subject: CN=0983bbe8db8ce4b8c15a87bcd097bc27b16dfc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c7:f2:3a:f6:14:cd:1e:64:78:0d:2b:61:e4:
d2:73:be:83:b8:c0:81:fb:a5:e9:5b:05:d5:d1:f5:
09:73:e3:a4:5a:28:c3:65:fb:bc:75:6a:b6:9f:f9:
3b:ad:58:b3:e4:f1:87:d9:40:aa:e6:48:64:34:75:
ef:b2:a0:55:c2:63:78:0a:3f:68:12:cc:43:ba:c1:
85:3c:a3:4e:e3:a0:e8:31:7f:10:61:a2:33:15:4c:
dd:a5:83:1e:f0:6e:0c:60:92:fe:ae:c0:fd:ed:65:
95:4d:1c:9e:d1:e2:83:39:9f:f8:13:44:9a:7a:d2:
ea:2d:3f:de:64:02:f4:06:a6:40:b0:57:ca:9c:f3:
f9:41:f0:cc:06:df:be:fb:96:31:9b:a1:4d:35:38:
18:41:f0:a7:08:a0:a2:f8:3c:98:dd:0b:05:e3:4e:
37:a5:fd:72:47:d8:56:5d:41:06:95:ed:33:e9:e7:
8b:42:a9:e6:20:18:4d:5c:2a:80:45:f3:20:1e:fe:
70:60:e3:7e:73:7a:63:17:ce:87:e6:9f:67:e7:ee:
85:19:29:9e:c9:b6:17:8f:a5:13:54:24:2b:d4:39:
8e:23:4e:c2:3b:4d:44:38:1d:d5:d9:a9:b7:90:eb:
ed:94:49:b2:a8:f3:21:96:aa:25:f8:64:a4:46:7c:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:83:BB:E8:DB:8C:E4:B8:C1:5A:87:BC:D0:97:BC:27:B1:6D:FC:21
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5c:35:0d:e3:52:62:03:37:26:4f:00:74:fb:0c:59:87:5a:
5a:b9:93:45:1b:e1:23:69:e2:46:83:f0:3b:86:1b:b1:fe:c7:
5f:0a:17:c3:91:35:ee:00:cf:73:3c:4d:96:24:1b:52:e5:44:
a0:6f:04:d6:31:63:98:c5:07:a7:01:31:1d:05:39:78:a9:ef:
66:83:0c:49:13:3a:37:14:4c:59:f0:e1:fa:cf:2e:00:89:0b:
3d:8e:5b:6a:90:dd:56:95:e1:0c:50:d0:5e:bf:2a:8f:fb:1b:
38:f5:2c:e9:e8:8d:0e:06:c9:bd:b5:79:76:16:7c:fc:11:16:
2b:9a:e4:d4:41:14:ae:3c:b2:cb:ca:41:6f:55:fe:b2:c5:cf:
95:6f:b8:f5:38:0e:eb:b4:e0:3a:0b:12:c7:26:e1:0b:fb:aa:
94:c3:cc:2d:dd:43:c7:5d:6e:a4:62:0b:22:08:bb:d0:be:b0:
00:ab:78:39:f1:84:5b:b7:d1:21:af:43:76:7f:ee:ff:a0:f6:
3f:fe:61:7c:4d:78:ef:08:c6:75:45:50:9c:6d:f2:20:18:51:
64:e4:d4:b3:fd:08:55:30:c4:d3:14:8a:5a:49:0c:18:cc:c4:
12:a8:e5:ca:03:87:69:89:6e:c7:36:49:51:aa:7d:80:37:93:
36:d6:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:54:48 2025 by rpki-client